GitHub

My linter for latest Node.js

Output a summary in YAML format from a TAP stream

During the security review of "Advanced Library Management System", discovered a critical SQL injection vulnerability in the "borrowed_book_search.php" file.

Code-projects STUDENT WEB PORTAL V1.0 signup.php SQL injection

Code-projects STUDENT WEB PORTAL V1.0 profile.php SQL injection

xss cve

Xss Cve

sql inject cve

The core issue lies in the trust model of additional_authorized_imports. When a developer authorizes the requests module (a common requirement for web-enabled agents), the sandbox does not enforce any egress filtering or URL validation. An attacker can leverage this to probe internal networks or exfiltrate sensitive data via OOB techniques.

Report and PoC of Heap Buffer Overflow in Pepper Language before version 0.1.1, commit 961a5d9988c5986d563310275adad3fd181b2bb7

Report and PoC of Global Buffer Overflow on SmallBASIC before 02364eff880ba62afac67bcceebafade2b40d21f

This repository contains information on all of the CVEs I found.

Chainy action that iterates through each item in the array with an asynchronous or synchronous iterator

Replaces each item in the array with the result of an asynchronous or synchronous iterator

Chainy action that sets the data for the chain with the data that is passed over to the plugin

my sve submission

Some public cve descriptions

CVE Hunting

A collection of vulnerabilities reported by me and my associates.

Write-ups for TP-Link product issues.

Function factories for performing synchronous operations after asynchronous operations

ESLint configuration.

reads PostgreSQL binary format for numeric values into a string

Node package for test grouping